@mastra/factory 0.1.0-alpha.3 → 0.1.0-alpha.5

package/dist/integrations/github/integration.d.ts

@@ -178,8 +178,8 @@ export declare class GithubIntegration implements FactoryIntegration {
      */
     routes(ctx: IntegrationContext): ApiRoute[];
     /**
-     * Session-scoped agent tools: PR subscribe/unsubscribe for sessions bound
-     * to a GitHub-backed project. Empty for sessions outside a GitHub project.
+     * Session-scoped agent tools for token refresh and PR subscriptions in
+     * sessions bound to a GitHub-backed project. Empty elsewhere.
      */
     sessionTools({ requestContext }: {
         requestContext: RequestContext;

package/dist/integrations/github/integration.js

@@ -196,8 +196,8 @@ function bindingStore(row, storage) {
   };
 }
 async function ensureProjectSandbox(options) {
-  const { fleet, row, storage, onProgress } = options;
-  return fleet.ensureSandbox(bindingStore(row, storage), onProgress);
+  const { fleet, row, storage, token, onProgress } = options;
+  return fleet.ensureSandbox(bindingStore(row, storage), { GH_TOKEN: token }, onProgress);
 }
 async function teardownProjectSandbox(options) {
   const { fleet, row, storage, sandbox } = options;
@@ -1474,13 +1474,6 @@ async function loadOrCreateSandboxRow(github, project, userId) {
 async function prepareProject(options) {
   const { github, fleet, project, userId, onProgress } = options;
   const sandboxRow = await loadOrCreateSandboxRow(github, project, userId);
-  const sandbox = await ensureProjectSandbox({
-    fleet,
-    row: sandboxRow,
-    storage: github.sourceControlStorage.sandboxes,
-    onProgress
-  });
-  const fresh = await github.sourceControlStorage.sandboxes.getById({ id: sandboxRow.id });
   const access = await github.versionControl.getRepositoryAccess({
     orgId: project.installation.orgId,
     repositoryId: project.repository.id
@@ -1488,6 +1481,14 @@ async function prepareProject(options) {
   if (!access.authorization) {
     throw new MaterializeError("Repository access did not include a bearer token.", "clone-failed");
   }
+  const sandbox = await ensureProjectSandbox({
+    fleet,
+    row: sandboxRow,
+    storage: github.sourceControlStorage.sandboxes,
+    token: access.authorization.token,
+    onProgress
+  });
+  const fresh = await github.sourceControlStorage.sandboxes.getById({ id: sandboxRow.id });
   const finalRow = fresh ?? sandboxRow;
   await materializeRepo({
     row: finalRow,
@@ -1807,7 +1808,8 @@ function buildProjectGitRoutes({
                 baseBranch: base,
                 headBranch: head,
                 title,
-                body: prBody
+                body: prBody,
+                actingUserId: userId
               });
               await emitAudit?.({
                 context: loose(c),
@@ -1918,6 +1920,18 @@ async function resolveSessionWorkspace(github, projectId, userId, sessionId) {
 // src/integrations/github/session-subscriptions.ts
 import { createTool } from "@mastra/core/tools";
 import { z } from "zod";
+
+// src/integrations/github/token-refresh.ts
+var GITHUB_TOKEN_INJECTOR_CONTEXT_KEY = "factoryGithubTokenInjector";
+function injectGithubToken(requestContext, token) {
+  const injector = requestContext.get(GITHUB_TOKEN_INJECTOR_CONTEXT_KEY);
+  if (!injector) {
+    throw new Error("GitHub token refresh requires an active Factory sandbox workspace.");
+  }
+  injector(token);
+}
+
+// src/integrations/github/session-subscriptions.ts
 function sessionUserId(user) {
   return user?.workosId ?? user?.id;
 }
@@ -2004,11 +2018,30 @@ async function unsubscribeCurrentSessionFromPullRequest(requestContext, pullRequ
   await unsubscribeFromPullRequest(await subscriptionInput(target, number), github.integrationStorage);
   return number;
 }
+async function refreshGithubToken(requestContext, github) {
+  const target = await resolveSessionTarget(requestContext, github);
+  const access = await github.versionControl.getRepositoryAccess({
+    orgId: target.orgId,
+    repositoryId: target.repository.id
+  });
+  const token = access.authorization?.token;
+  if (!token) throw new Error("Repository access did not include a bearer token for the Factory session.");
+  injectGithubToken(requestContext, token);
+}
 function createGithubSubscriptionTools(requestContext, github) {
   const context = requestContext.get("controller");
   const user = requestContext.get("user");
   if (!context?.getState().projectRepositoryId || !sessionOrgId(user) || !sessionUserId(user)) return {};
   return {
+    github_refresh_token: createTool({
+      id: "github_refresh_token",
+      description: "Refresh GitHub CLI authentication in the active Factory sandbox. Use this after a gh command fails because authentication is expired, invalid, or missing. It installs a fresh GH_TOKEN for subsequent sandbox commands. After this tool succeeds, retry the failed gh command. Takes no arguments and never returns the token.",
+      inputSchema: z.object({}),
+      execute: async () => {
+        await refreshGithubToken(requestContext, github);
+        return { refreshed: true };
+      }
+    }),
     github_subscribe_pr: createTool({
       id: "github_subscribe_pr",
       description: "Subscribe this thread to GitHub pull request activity. You usually do not need this tool: successful gh pr create commands subscribe automatically. Use it for an existing PR or to recover when automatic subscription did not occur. Closed or merged PRs are unsubscribed automatically. Accepts a PR number or canonical URL for the active project.",
@@ -2857,8 +2890,8 @@ var GithubIntegration = class {
     });
   }
   /**
-   * Session-scoped agent tools: PR subscribe/unsubscribe for sessions bound
-   * to a GitHub-backed project. Empty for sessions outside a GitHub project.
+   * Session-scoped agent tools for token refresh and PR subscriptions in
+   * sessions bound to a GitHub-backed project. Empty elsewhere.
    */
   sessionTools({ requestContext }) {
     return createGithubSubscriptionTools(requestContext, this);